Web Push Notifications – Webpushr Security & Risk Analysis

The webpushr-web-push-notifications plugin version 4.39.0 exhibits a mixed security posture. While it demonstrates some good practices like the use of prepared statements for a majority of its SQL queries and a decent number of nonce and capability checks, significant concerns arise from its entry points and historical vulnerability patterns. The presence of an unprotected AJAX handler presents a direct attack vector, and the taint analysis revealed a flow with an unsanitized path, suggesting potential for vulnerabilities if not handled carefully. The plugin's history of four known CVEs, including high and medium severity issues like Cross-Site Scripting, Missing Authorization, and Exposure of Sensitive Information, indicates a recurring struggle with robust security implementation. The commonality of these vulnerability types suggests systemic issues in input validation, authorization, and output sanitization that need persistent attention. While the current version has no unpatched vulnerabilities, the past pattern and the static analysis findings necessitate vigilance. Overall, the plugin has strengths in areas like SQL handling, but the unprotected entry points and historical issues warrant a cautious approach to its deployment.